A Mainstream Contributors To Sexual Exploitation
Cloudflare says it wants to build a better internet. So why does it provide services to some of the most prolific prostitution forums and deepfake sites?
Between 10 – 20% of American men have bought someone to use for sex. And tech company Cloudflare provides the internet infrastructure for some of the most prolific prostitution sites – many of which have come under fire for sex trafficking.
Sex buyers represent consumer-level demand and are the driving force fueling the prostitution market. Without male demand for paid sex, sex trafficking would cease to exist. No buyers = no business.
“Normalized beliefs” about the commercial sex trade are a main driver of sex buying. Sex buyer review boards, or so-called “hobby boards,” operate like a Yelp for prostitution, allowing sex buyers to “review” and rate women whom they have paid for sex. These review boards normalize sex buying. Comments often reflect sex buyers’ objectification of and callous disregard for the dignity and humanity of women in prostitution.
Why are sex buyer review boards and other sites that facilitate prostitution allowed to operate openly online? If these boards were forums for discussing other illegal activities, like drug trading or illegal gun sales, they would be shut down immediately.
Cloudflare provides basic web infrastructure to some of the largest, most well-known sex buyer “review boards” (because men review women like products) and other prostitution sites (or so-called “escort sites”). Many of these sites have been found to facilitate sex trafficking. Cloudflare supports sites that host deepfake pornography tools – the actual technology used to create abusive content of unsuspecting individuals, mostly women. By providing content delivery network (CDN), domain name system (DNS), and Web Application Firewall (WAF) services to exploitative enterprises, Cloudflare enables illegal and harmful activities to thrive. Cloudflare is an essential component in keeping these exploitative sites operational. In fact, none of them could function at their current scale without Cloudflare.
[The hyperlinks included below do not lead to the exploitative websites referenced. The links are directed to the BuiltWith data showing the service providers like Cloudflare.]
Some of the prostitution sites Cloudflare provides services for include: RubMaps, Chaturbate, TNA Board, The Erotic Review, AdultSearch, Seeking, yesbackpage, OnlyFans, and Skip the Games. These sites facilitate prostitution and normalize sex buying, which is the root cause of sex trafficking.
Cloudflare also provides services for many prominent deepfake pornography platforms, including Clothoffi.io, Undress.love, Undress.app, Nudify.online, Deepnude.cc, and Undressai.com. These tools are used to “undress” unsuspecting women and girls, which constitutes image-based sexual abuse (IBSA) – the capture, creation, and/or sharing of sexually explicit images without the subject’s knowledge or consent.
Cloudflare can terminate its services to any site that engages in illegal activities or violates its terms of service, which they have done before when facing pressure to cut ties with problematic platforms. For example, in April 2018, Cloudflare terminated CDN services for decentralized social media platform Switter, a platform for prostitution, after the passage of the federal Fight Online Sex Trafficking Act (FOSTA). In August 2019, Cloudflare terminated services for 8chan following multiple mass shootings connected to the online forum.
So why does Cloudflare continue to provide services to sites that facilitate sexual exploitation – including ones known for sex trafficking?
This is a composite story, based on common survivor experiences. Real names and certain details have been changed to protect individual identities.
I once heard it said, “Trust is given, not earned. Distrust is earned.”
I don’t know if that saying is true or not. But the fact is, it doesn’t matter. Not for me, anyway. Because whether or not trust is given or earned, it’s no longer possible for me to trust anyone ever again.
At first, I told myself it was just a few anomalous creeps. An anomalous creep designed a “nudifying” technology that could strip the clothing off of pictures of women. An anomalous creep used this technology to make sexually explicit images of me, without my consent. Anomalous creeps shared, posted, downloaded, commented on the images… The people who doxxed me, who sent me messages harassing and extorting me, who told me I was a worthless sl*t who should kill herself—they were all just anomalous creeps.
Most people aren’t like that, I told myself. Most people would never participate in the sexual violation of a women. Most people are good.
But I was wrong.
Because the people who had a hand in my abuse weren’t just anomalous creeps hiding out in the dark web. They were businessmen. Businesswomen. People at the front and center of respectable society.
In short: they were the executives of powerful, mainstream corporations. A lot of mainstream corporations.
The “nudifying” bot that was used to create naked images of me? It was made by codes hosted on GitHub—a platform owned by Microsoft, the world’s richest company. Ads and profiles for the nudifying bot were on Facebook, Instagram, Reddit, Discord, Telegram, and LinkedIn. LinkedIn went so far as to host lists ranking different nudifying bots against each other. The bot was embedded as an independent website using services from Cloudflare, and on platforms like Telegram and Discord. And all these apps which facilitated my abuse are hosted on Apple’s app store.
When the people who hold the most power in our society actively participated in and enabled my sexual violation … is it any wonder I can’t feel safe anywhere?
Make no my mistake. My distrust has been earned. Decisively, irreparably earned.
Cloudflare provides CDN (content delivery network) services to some of the most prolific, well-known sex buyer review boards (because men “review” women like products) and other prostitution sites: RubMaps, Chaturbate, TNA Board, The Erotic Review, AdultSearch, Seeking, yesbackpage, and OnlyFans. Cloudflare provides DNS (domain name system) for the prostitution site Skip the Games. Cloudflare also provides Web Application Firewall (WAF) services to the following prostitution sites:
Sex buyer “review boards” and platforms like OnlyFans and Seeking.com are known for facilitating prostitution, which is illegal in all but a few U.S. counties in Nevada. Several of them have also been shown through law enforcement investigations and news reports to be hotspots for sex trafficking. Furthermore, review boards normalize sex buying, which is the root cause of sex trafficking. Without male demand for paid sex, sex trafficking would cease to exist. No buyers = no business.
By providing services to these sites, Cloudflare facilitates illegal activities and normalizes sex buying. Research has identified “normalized beliefs” about the commercial sex trade as a main driver of sex buying.
Sex buyers represent consumer-level demand and are the driving force fueling markets for paid sex; without sex buyer demand, sex trafficking would not exist. Sex buyers inflict serious psychological harm on those they purchase for sex. Numerous studies have revealed the violence perpetrated by sex buyers. Read more about why sex buyers must be stopped here.
This violence is reflected in sex buyer discussions of their activities. Sex buyer review boards, or so-called “hobby boards,” operate like a Yelp for prostitution, allowing sex buyers to “review” and rate women whom they have paid for sex. These reviews often show sex buyers’ callous disregard for the women they purchase sexual access to; many reviews denigrate and objectify prostituted women, with little consideration of whether they might be victims of sex trafficking.
Review boards have become integral to the U.S. sex trade in recent years, after the seizure of Backpage by the Department of Justice and crackdown on Craigslist for facilitating sex trafficking. Rob Spectre, founder of childsafe.ai, a software startup that combats sex trafficking, explained that “hobby boards” have emerged as a greater hub for sex buyers and sex trafficking after those popular sites were taken down, saying, “This is where the entire demand is going to shift. There’s never going to be another Backpage. It’s never gonna look like that. It’s gonna look like this.” A 2021 Government Accountability Office (GAO) report confirmed that the disruption of the online commercial sex market caused by the seizure of backpage.com and passage of FOSTA has led to increased use of hobby boards and sugar dating platforms.
In June 2020, the prostitution site CityXGuide was seized and shut down by the U.S. Attorney’s Office for the Northern District of Texas, and its owner was charged with 28 counts including promotion of prostitution and reckless disregard of sex trafficking. Yet Cloudflare continues to provide services to similar sites that facilitate illegal activity.
In June 2022, the Coalition Against Trafficking in Women (CATW) released a report called “From Impunity to Accountability: Deterring Sex Buyers in New York State and Beyond” that analyzed reviews from sex buyer review boards, including BestGFE, RubMaps, USA Sex Guide, and Utopia Guide, in New York state from 2008 to 2022. The beginning of the report contains this trigger warning: “The contents of this document include statements made by sex buyers that include the description of violent, sexist, racist, pornographic, dehumanizing, torturous and degrading acts which can offend or even disturb the reader.” The CATW report further explained, “These reviews give us proof that sex buyers are in fact visible and unequivocal in their expressions of dehumanization and commodification of women, in violation of principles of human rights, equality, and respect for the dignity of persons.”
A 2020 analysis of sex buyer reviews from Chicago on USA Sex Guide found that sex buyers’ self-described identity was “closely associated with maintaining, perpetrating, and minimizing violence against women.” A 2018 study that analyzed online sex buyer reviews of legal brothels in Australia found that “sex buyers actively construct and normalize narratives of sexual violation and violence against women…through their language, referencing objectification, unsafe sex practices, and, in more extreme cases, rape to create a sense of community with other [sex buyers].”
Sites with services from Cloudflare have also been found to facilitate sex trafficking. In January 2024, investigators discovered an online sex trafficking ring in which payments were facilitated through Cash App and sex traffickers posted images/advertised victims on prostitution site “SkiptheGames.” Other news articles and law enforcement press releases linking sites with services provided by Cloudflare to prostitution and sex trafficking include the following:
Rubmaps
Skip the Games
Chaturbate
TNA Board
AdultSearch
Cloudflare provides infrastructure to sexually exploitative companies OnlyFans and Seeking as well. OnlyFans was placed on NCOSE’s 2023 Dirty Dozen List for evidence of child sexual abuse material (CSAM, the more apt term for child pornography), sex trafficking, child online exploitation, harassment, doxing, cyberstalking, and image-based sexual abuse. A Reuters investigation of OnlyFans published March 13, 2024 found that “more than 120 people have complained to U.S. police agencies that they were featured in the site’s sexually explicit content without their consent – including a woman who alleged a video of her rape was sold on OnlyFans.” Seeking (formerly Seeking Arrangement) is a platform for “sugar dating,” which is another term for prostitution, and was featured on NCOSE’s Dirty Dozen List in 2020 and 2021 for targeting college students and people suffering from the economic uncertainty of COVID-19 to groom them to be sexually used by older, wealthier men. Both platforms are well-known among sex buyers and within the commercial sex industry to be primary spots for buying people for sex.
By continuing to provide services to sex buyer review boards and other prostitution sites, Cloudflare is complicit in the harms they perpetuate.
Image-based sexual abuse (IBSA) encompasses a range of harmful activities that weaponize sexually explicit or sexualized materials against the persons they depict. IBSA includes creating, stealing, extorting, threatening or actually distributing sexually explicit or sexualized content without the genuine consent of the depicted individuals and/or for the purpose of sexual exploitation. This includes the non-consensual use of a person’s images for the creation of photoshopped/artificial pornography or sexualized materials intended to portray a person (popularly referred to as ‘deepfake’ pornography).
Deepfake websites rely on companies like Cloudflare to provide them with basic web infrastructure. Cloudflare provides CDN, DNS, and WAF services for some of the most prolific “nudifying” and deepfake pornography websites, including Clothoff.io, Undress.love, Undress.app, Nudify.online, Deepnude.cc, and provides DNS services for Undressai.com.
In fact, in August 2023, a Bloomberg review found that “13 of the top 20 deepfake websites are currently using web hosting services from Cloudflare Inc. to stay online.” Cloudflare services amplify the access, quantity, and speed of use of such sites. While Mr.Deepfakes doesn’t appear to use Cloudflare’s services anymore, it had previously used Cloudflare’s services since its inception (though it does still appear in Cloudflare Radar Top 50K).
CelebJihand – arguably the second most popular deepfake pornography website – functions similarly to Mr.Deepfakes and Pornhub as a pornography tube site and reports Cloudflare as its CDN, DNS, and WAF provider. CelebJihad was one of the origin sites of Taylor Swift’s deepfake abuse that occurred a little more than a month ago. Cloudflare, as the site’s CDN provider, could have removed or banned access to her abuse content on CelebJihad, and chose not to, allowing her abuse to continue to proliferate.
This is especially concerning considering the explosion in popularity of nudifying” technology, which disproportionately affects children and women. In 2023 alone, advertisements for ‘undressing apps’ increased by over 2,400%. Recent reports have documented stories of “nudify” apps that are being weaponized by teen boys against their female classmates. In February 2024, Clothoff was one of the deepfake pornography tools involved in the sale of nonconsensual deepfake pornography on an online video game marketplace.
For the full list of services Cloudflare provides for each of these sexually exploitative platforms, see table below.
Website | Content Delivery Network (CDN) | Verified CDN | Web Hosting Providers | Name Server | Web Application Firewall (WAF) |
RubMaps | |||||
Chaturbate | NA | ||||
TNA Board | |||||
The Erotic Review | |||||
AdultSearch | |||||
Seeking | |||||
yesbackpage | |||||
OnlyFans | 3 to 9 ccTLD Redirect, 10 to 14 ccTLD Redirects, Amazon Route 53 | NA | |||
SkipTheGames | NA | NA | |||
clothoff.io | |||||
Undress.love | |||||
Undress.app | |||||
Nudify.online | |||||
Deepnude.cc | |||||
Undress.ai | NA | NA | Combahton FlowShield, Tier.Net, US Server Location, Clouvider | NA | |
CelebJihad | NA | ||||
ThePornDude |
The National Trafficking Sheltered Alliance (NTSA) conducted a national survey of 82 service providers and 39 law enforcement respondents to answer Protection Questions 16, 17, and 19 from the U.S. Department of State’s Request for Information for the 2024 Trafficking in Persons Report (TIP Report). With 29 questions in total, 25 were framed based on the questions of the TIP Report itself, and the only alterations were to define or use more widely accepted terms in our field. Four additional questions addressed further field research for partners of NTSA in the full survey for service providers. NCOSE submitted questions for this survey regarding survivors of sex trafficking who had pornography/sexually explicit images made of them by either sex buyers or sex traffickers. Five service providers identified Rubmaps, 17 identified Skip the Games, 14 identified Seeking (formerly Seeking Arrangement), 19 identified YesBackpage, and 35 identified OnlyFans as platforms where victims they serve have been trafficked and/or had their pornography/sexually explicit images non-consensually distributed. Cloudflare provides services for all these entities. (National Trafficking Sheltered Alliance, Survey for Submission to the U.S. Department of State 2024 Trafficking In Persons Report [Unpublished raw data].)
Cloudflare is “the world’s fastest content delivery network,” able to reach about 95% of the world’s Internet-connected population within approximately 50 milliseconds.
In 2018 the United States Congress passed the Fight Online Sex Trafficking/Stop Enabling Sex Traffickers Act, commonly known as FOSTA-SESTA, which imposed severe penalties on online platforms that facilitate sex trafficking.
In August 2023, a Bloomberg review found that “13 of the top 20 deepfake websites are currently using web hosting services from Cloudflare Inc. to stay online.”
A study of online sex buying analyzing data from 15 US cities estimated that 1 out of every 20 males over the age of 18 in each city was soliciting sex via online sex ads.
During the National Johns Suppression Initiative in 2019, prostitution ads posted on so-called “hobby boards” produced 50-60 buyer responses per day, compared to 30-40 buyer responses when posted on other prostitution sites.
Primary Prevention of Sex Trafficking: Moving the Needle on Demand Reduction
Live panel discussion from February 29, 2024
This presentation was given at the 2018 Coalition to End Sexual Exploitation Global Summit hosted by the National Center on Sexual Exploitation.
Peter Qualliotine
Co-Founder/Director, Men’s Accountability, Organization for Prostitution Survivors
Watch this presentation from the 2022 CESE Global Summit from Gail Dines, Ph.D., Culture Reframed